https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:51:42.364597+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-28243 CVE-2020-28243 2026-10-02T16:51:42.395008+00:00

An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any user able to create a files on the minion in a non-blacklisted directory.

 https://cve.radiocsirt.org/vuln/ghsa-phhw-3wc9-8q75 GHSA-phhw-3wc9-8q75 — SaltStack Salt command injection via a crafted process name 2026-10-02T16:51:42.395058+00:00

Affected: PyPI: salt

An issue was discovered in SaltStack Salt before 3002.5. The minion's `restartcheck` is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any user able to create a files on the minion in a non-blacklisted directory.